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CLAIMS: 

1. An electronic voting method comprising the step of using a fair blind 
signature scheme to obtain a digital signature (y*) of a data signal (jc<) 

5 comprising a voter's vote (v*). 

2. The electronic voting method of claim 1 , wherein the fair blind signature 
scheme is a threshold fair blind signature scheme in which the digital signature 
is obtained from a sub-set of a group of servers, the group of servers containing 

10 n servers and the sub-set containing t servers, where t < n. 

3. The electronic voting method of claim 1 or 2, wherein the data signal (x$ 
corresponds to the voter's vote (v,) encrypted according to a first encryption 
scheme said first encryption scheme being the encryption scheme of a 

15 first mix-net ( 7/ty, and the method further comprises the step of applying the 
decryption scheme ( ) inverse to said first encryption scheme to said data 
signal fa) whereby to retrieve the voter's vote (v/). 

4. The electronic voting method of claim 3, and comprising the steps of: 

20 receiving, in a first order, a batch of encrypted data signals, each 

encrypted data signal (a) comprising data encrypted according to a second 

encryption scheme said data including a respective data signal fa); 

retrieving each data signal fo) from the respective encrypted data signal 
(ci ) in said batch by applying a decryption scheme (Z?^) inverse to said second 
25 encryption scheme and 

outputting the retrieved data signals (jc/) for said batch in a different order 
from said first order. 
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5. The electronic voting method of claim 4, wherein said second encryption 
scheme is the encryption scheme of a second mix-net (A#. 

6. The electronic voting method of claim 5, and comprising the step of 
5 detecting irregularities in the voting process, said step of detecting irregularities 

comprising verifying that the ballots to be counted do not contain duplicated 
data-pairs, wherein a data-pair corresponds to one of said data signals and the 
digital signature thereof. 

10 7. The electronic voting method of claim 5, and comprising the step of 
detecting irregularities in the voting process, wherein the step of detecting 
irregularities comprises checking the validity of the digital signatures in the 
ballots to be counted. 

15 8. The electronic voting method of claim 5, and comprising the step of 
detecting irregularities in the voting process, wherein the step of detecting 
irregularities comprises checking that there is no overlap between the ballots to 
be counted and entries in a revocation list 

20 9. An electronic voting method according to any previous claim and 
comprising the steps of: 

receiving said data signal fy) for digital signature according to said fair 
blind signature scheme at a server module pLS), said data signal fa) 
comprising a vote (vt) selected by a voter said vote (v*) being encrypted 

25 according to said first encryption scheme (2^), blinded according to said fair 

blind signature scheme and digitally signed according to a digital signature 
scheme of said voter; 

verifying, by said server module (J^5), that the digital signature {s t ) in the 
received signal is valid; 
30 in the case where the verifying step confirms that the digital signature in 

the signal received by said server module (JAS) is valid, said server module 
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(J2LS) digitally signs the blinded encrypted vote fa) and outputs the digitally- 
signed message (S^fa)); 

unblinding the digitally-signed message (S_ c (ci)) to yield said digital 
signature fa) of the data signal fo); 
5 encrypting said data signal fo) and said digital signature fa) thereof 

according to said second encryption scheme (2^) to produce encrypted data 
signal (a); and 

signing said encrypted data signal according to a signature scheme of 
the voter (VJ. 

lO 

1 0. An electronic voting system comprising: 
a plurality of voter modules (10), and 
an admin server module (20), 

wherein a voter module (10) and the admin server module (20) 
15 cooperate in application of a fair blind signature scheme whereby to obtain a 
digital signature fa) of a data signal fo) comprising the respective voter's vote 

11. A voter module (10) adapted to cooperate with an admin server module 
20 (20) in application of a fair blind signature scheme whereby to obtain a digital 

signature fa) of a data signal fa) comprising the voter's vote fa). 

12. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voter 

25 module (1 0) according to claim 1 1 . 

13. A voting system admin server module (20) adapted to cooperate with a 
voter module (10) in application of a fair blind signature scheme whereby to 
obtain a digital signature fa) of a data signal fo) comprising the voter's vote (v f ). 
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14. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting 
system admin server module (20) according to claim 13. 

5 15. A noting system randomizer module (40) comprising: 

input means for receiving a batch of cast votes, each cast vote 
comprising an encrypted data signal fa) comprising a respective voter's vote (v*) 
digitally signed according to a fair blind signature scheme, each encrypted data 
signal fa) being encrypted according to a predetermined encryption scheme 

10 (£^);and 

a mix-net (Afi for decrypting said encrypted data signals fa) by applying 
a decryption scheme (Z?^ inverse to said predetermined encryption scheme 
CEJ; and 

output means for outputting the decrypted signals of said batch in an 
15 order different from the order of the corresponding encrypted data signals in 
said batch - 

16. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting 

20 system randomizer module (40) according to claim 15. 

17. A voting system tallier module (50) comprising: 

input means for receiving cast votes, each cast vote comprising a data 
signal fa) digitally signed according to a fair blind signature scheme, each data 
25 signal fa) comprising a respective voter's vote fa) encrypted according to an 
encryption scheme (£^); and 

a mix-net (A/) for decrypting said encrypted votes fa) by applying a 
decryption scheme inverse to said encryption scheme HE J). 
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18. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting 
system tallier module (50) according to claim 17. 



